Effective date: 15 July 2026
Last updated: 15 July 2026
1. Introduction
This Privacy Policy explains how Decoding 22 Energies collects, uses, stores and shares personal information when you use its website, application, accounts, matrix calculations, reports, payments, PDF downloads and personalised question functions.
The Service operates under the name:
Decoding 22 Energies
Country of operation: Belgium
Email: info@decoding22energies.com
For the purposes of applicable data-protection law, Decoding 22 Energies determines why and how personal information is processed in connection with the Service.
2. Scope of this Privacy Policy
This Privacy Policy applies to:
- visitors to the website;
- registered users;
- free users;
- paying users;
- Personal Matrix users;
- parents or guardians creating a Child Matrix;
- users creating a Couple Matrix;
- users submitting questions through Ask Your Matrix;
- users contacting support.
It does not apply to independent third-party websites or services that have their own privacy policies.
3. Personal information we collect
3.1 Account information
When you create or use an account, we may collect:
- your first name;
- your last name, where requested;
- your email address;
- your preferred language;
- account identifiers;
- authentication information;
- account creation date;
- login activity;
- account status;
- free or paid access status;
- purchased entitlements;
- remaining question credits.
Passwords and authentication credentials may be processed by the authentication provider used by the Service.
Decoding 22 Energies does not need access to your plain-text password.
3.2 Personal Matrix information
When you create a Personal Matrix, we may collect and process:
- your first name or chosen display name;
- your birth date;
- selected language;
- selected matrix type;
- calculated energy numbers;
- matrix positions;
- channels and codes;
- element and polarity calculations;
- generated interpretations;
- report sections;
- PDF-generation information;
- the date the matrix was created;
- the access status of the matrix.
3.3 Child Matrix information
When you create a Child Matrix, we may collect and process:
- the child's first name or chosen display name;
- the child's birth date;
- selected report language;
- calculated matrix values;
- generated child-focused interpretations;
- saved report information;
- the account of the adult who created the matrix.
A Child Matrix should only be created by:
- a parent;
- a legal guardian;
- an authorised caregiver;
- another adult who has a lawful reason and appropriate permission to provide the information.
3.4 Couple Matrix information
When you create a Couple Matrix, we may collect and process:
- the name or chosen name of the first person;
- the birth date of the first person;
- the name or chosen name of the second person;
- the birth date of the second person;
- individual matrix calculations;
- the combined Couple Matrix;
- relationship channels and codes;
- generated relationship interpretations;
- saved report information.
By providing another person's information, you confirm that you have a lawful reason and appropriate permission to submit it.
3.5 Additional matrices
When you create an additional matrix for another person, we may process:
- the person's name or chosen display name;
- birth date;
- relationship to the account holder, where provided;
- calculated values;
- generated analysis;
- access and payment status.
3.6 Ask Your Matrix information
When you use Ask Your Matrix, we may process:
- the question you submit;
- the matrix to which the question relates;
- relevant matrix calculations;
- relevant saved report information;
- generated answers;
- previous questions within the same matrix context;
- the number of questions used;
- the number of questions remaining;
- generation status;
- error information;
- technical logs used to prevent duplicate charging or question loss.
Do not submit:
- passwords;
- complete payment-card information;
- government identification numbers;
- medical records;
- highly sensitive personal documents;
- information you are not authorised to share.
3.7 Payment information
Payments may be processed through Stripe.
Decoding 22 Energies may receive and store:
- purchased product;
- transaction reference;
- payment status;
- payment date;
- amount;
- currency;
- Stripe customer reference;
- Stripe payment reference;
- billing information where required;
- invoice-related information;
- refund or dispute status.
Full payment-card numbers, security codes and complete card details are processed by Stripe and are not intended to be stored in the Decoding 22 Energies application database.
3.8 Technical information
When you use the Service, technical information may be collected, including:
- IP address;
- device type;
- browser type;
- operating system;
- preferred language;
- date and time of access;
- requested pages;
- session information;
- authentication events;
- security events;
- error logs;
- performance information;
- cookie preferences;
- consent records;
- approximate region derived from technical data, where applicable.
3.9 Support information
When you contact support, we may process:
- your name;
- email address;
- account information;
- transaction information;
- the content of your message;
- screenshots or attachments you provide;
- previous communication concerning the same request;
- the response provided.
3.10 Marketing information
Where marketing communications are offered, we may process:
- your email address;
- marketing-consent status;
- date and source of consent;
- unsubscribe status;
- campaign or referral source.
Marketing messages will only be sent where there is a valid legal basis.
4. Information we do not intentionally request
Decoding 22 Energies does not intentionally require users to provide:
- medical files;
- detailed health records;
- political opinions;
- religious beliefs;
- information about sexual orientation or sex life;
- criminal records;
- government identification numbers;
- complete payment-card details;
- account passwords;
- biometric data.
Because questions are entered in free-text fields, a user may voluntarily include sensitive information.
Users are asked not to provide more personal or sensitive information than is necessary.
5. Purposes of processing
5.1 Providing accounts
We process account information to:
- create and maintain user accounts;
- authenticate users;
- remember language preferences;
- display saved matrices;
- manage access rights;
- protect accounts from unauthorised access.
The legal basis is the performance of the agreement with the user and the user's request to create an account.
5.2 Calculating matrices
We process names, birth dates and selected matrix types to:
- calculate matrix values;
- create diagrams;
- determine energy positions;
- generate the requested matrix.
The legal basis is the performance of the requested Service.
5.3 Generating and storing analyses
We process matrix data and approved knowledge content to:
- generate personalised interpretations;
- store completed reports;
- display reports in the account;
- create PDF reports;
- avoid generating the same report repeatedly.
The legal basis is the performance of the requested Service.
5.4 Answering matrix questions
We process questions and relevant matrix information to:
- understand the question;
- generate a matrix-related answer;
- maintain question-credit balances;
- avoid charging a question after a technical failure;
- store the answer in the relevant matrix context.
The legal basis is the performance of the requested Service.
5.5 Providing paid access
We process account, product and transaction information to:
- confirm payment;
- unlock paid report sections;
- provide included question credits;
- provide purchased additional matrices or questions;
- handle payment and access problems.
The legal basis is the performance of the purchase agreement.
5.6 Accounting and legal compliance
Transaction, payment and invoice information may be retained to:
- maintain legally required accounting records;
- comply with tax obligations;
- answer lawful requests;
- establish or defend legal claims.
The legal basis is compliance with legal obligations and, where applicable, legitimate interests.
5.7 Security and fraud prevention
We may process account and technical information to:
- detect unauthorised access;
- prevent fraud;
- prevent payment abuse;
- prevent misuse of question credits;
- investigate security incidents;
- protect the Service and its users;
- enforce applicable terms.
The legal basis is the legitimate interest in operating a secure and reliable Service and compliance with applicable legal obligations.
5.8 Customer support
We process messages, account information and transaction information to:
- answer questions;
- correct access problems;
- investigate errors;
- handle complaints;
- respond to privacy requests.
The legal basis is performance of the agreement and the legitimate interest in providing customer support.
5.9 Service improvement
Limited technical, error and usage information may be used to:
- identify technical problems;
- improve usability;
- improve page performance;
- improve language quality;
- reduce failed generations;
- understand how public features are used.
Where possible, aggregated or de-identified information is used.
The legal basis is the legitimate interest in improving and maintaining the Service.
5.10 Marketing
Marketing messages are sent only where permitted by law.
Where consent is used, you can withdraw it at any time.
5.11 Analytics and optional cookies
Optional analytics, measurement or marketing technologies are used only after consent where required.
6. Automated calculations and generated content
Matrix values are calculated using birth-date information and the calculation rules used by the Service.
Some report texts and answers are generated using automated language-generation technology.
Information sent for generation may include:
- matrix type;
- energy numbers;
- matrix positions;
- codes and channels;
- selected language;
- approved knowledge content;
- the user's question;
- relevant stored report context.
Generated content is not used to make legally binding or similarly significant automated decisions concerning:
- employment;
- credit;
- insurance;
- housing;
- healthcare;
- education;
- legal rights.
Users may contact Decoding 22 Energies regarding generated content and may request correction or deletion of stored information where applicable.
7. Providers and recipients
Decoding 22 Energies may use specialised service providers to operate the Service.
7.1 Base44
Base44 may provide application infrastructure, hosting, authentication, database, backend and related technical services.
Data processed may include:
- account information;
- matrix information;
- stored reports;
- technical logs;
- access information.
7.2 Stripe
Stripe processes payments, payment verification and fraud-prevention information.
Data processed may include:
- payment-card information;
- billing information;
- transaction information;
- customer references;
- device and fraud-prevention information.
Stripe processes full card details under its own privacy and security framework.
7.3 OpenAI
OpenAI technology may be used to generate personalised report text and answers.
Data sent may include:
- relevant matrix data;
- selected report language;
- approved knowledge content;
- questions entered by the user;
- instructions needed to generate the requested output.
Only information considered necessary for the requested generation should be sent.
7.4 Email providers
An email-delivery provider may process:
- email addresses;
- account or transaction notifications;
- support communications;
- delivery status.
7.5 Professional advisers and authorities
Information may be shared with:
- accountants;
- legal advisers;
- payment providers;
- insurers;
- competent authorities;
- courts;
- regulators;
when reasonably necessary or legally required.
8. International data transfers
Some technology providers may process information outside Belgium or outside the European Economic Area.
Where applicable, international transfers are protected through a recognised legal mechanism, which may include:
- an adequacy decision;
- Standard Contractual Clauses;
- supplementary contractual or technical safeguards;
- another transfer mechanism permitted under applicable law.
9. Retention
Personal information is not intended to be kept longer than reasonably necessary.
9.1 Account and matrix data
Account information, saved matrices and generated reports may be retained while:
- the account remains active;
- the user wishes to access saved reports;
- the information is required to provide purchased access.
A user may request deletion of an individual matrix or the account, subject to legal retention requirements.
9.2 Questions and generated answers
Questions and answers may be retained within the relevant matrix while the matrix or account remains active.
They may be deleted when:
- the matrix is deleted;
- the account is deleted;
- retention is no longer necessary;
- a valid deletion request is completed.
9.3 Payment and accounting information
Payment and accounting information may be retained for the period required under applicable Belgian accounting, tax and consumer law.
Information that must legally be retained may not be deleted immediately after an account-deletion request.
Where possible, such information will be separated from the active user profile and access will be restricted.
9.4 Security logs
Security and authentication logs may be retained for a reasonable period necessary to:
- protect the Service;
- investigate misuse;
- prevent fraud;
- establish or defend legal claims.
9.5 Support messages
Support messages may be retained for a reasonable period after the request is closed in order to:
- follow up on the request;
- handle complaints;
- demonstrate how a matter was resolved;
- protect legal rights.
9.6 Backups
Deleted information may remain temporarily in protected backup copies until the backups are overwritten through the normal backup cycle.
10. Child information
The general account and payment Service is intended for adults.
A Child Matrix must be created by a parent, legal guardian or authorised adult.
Child Matrix information is not intended to be used for:
- behavioural advertising;
- sale to data brokers;
- credit decisions;
- employment decisions;
- insurance decisions;
- automated educational placement;
- medical or psychological diagnosis.
A parent or guardian may contact Decoding 22 Energies to request access, correction or deletion of a child's information.
11. Information submitted about another person
Users may only submit another person's information when they have:
- permission;
- parental or legal authority;
- another lawful basis.
A user creating a matrix for another person should inform that person about this Privacy Policy where appropriate.
The Service must not be used for:
- secret monitoring;
- harassment;
- discrimination;
- employment screening;
- insurance screening;
- credit screening;
- decisions with serious legal or personal consequences.
12. Cookies and similar technologies
Decoding 22 Energies may use necessary cookies and similar technologies for:
- authentication;
- security;
- session management;
- language preferences;
- purchases;
- cookie preferences;
- account functionality.
Optional analytics or marketing technologies will only be used after consent where required.
More information is available in the Cookie Policy.
13. User rights
Depending on the circumstances and applicable law, you may have the right to:
- receive information about the processing of your data;
- request access to your personal information;
- receive a copy of your information;
- correct inaccurate information;
- complete incomplete information;
- request deletion;
- request restriction of processing;
- object to certain processing;
- receive portable information;
- withdraw consent;
- object to direct marketing;
- submit a complaint to a supervisory authority;
- receive information about relevant automated processing.
Withdrawal of consent does not affect processing that occurred lawfully before the withdrawal.
Some rights are subject to legal exceptions.
14. Exercising your rights
To submit a privacy request, contact:
info@decoding22energies.com
Your request should clearly explain what you want Decoding 22 Energies to do.
Limited additional information may be requested to confirm your identity and protect your account from unauthorised access.
Excessive identification information will not be requested unless reasonably necessary.
15. Complaints
You may lodge a complaint with the Belgian Data Protection Authority:
Belgian Data Protection Authority
Rue de la Presse 35
1000 Brussels
Belgium
You may also contact the competent data-protection authority in the European country where you live or work.
16. Security
Reasonable technical and organisational measures are used to protect personal information.
These measures may include:
- encrypted connections;
- account authentication;
- access controls;
- server-side storage of secret keys;
- restricted database permissions;
- logging and monitoring;
- backups;
- payment processing through Stripe;
- incident investigation procedures.
No internet service can guarantee complete security.
17. Data breaches
Where a personal-data breach occurs, Decoding 22 Energies will:
- investigate the incident;
- take reasonable containment measures;
- assess the possible risk;
- notify the competent authority where legally required;
- notify affected individuals where legally required.
18. External links
The Service may contain links to external websites.
Decoding 22 Energies is not responsible for the privacy practices of independent external websites.
Users should read the privacy information of those services.
19. Changes to this Privacy Policy
This Privacy Policy may be updated when:
- the Service changes;
- providers change;
- processing activities change;
- legal requirements change;
- additional clarification is needed.
The latest version will display the updated effective date.
Significant changes may also be communicated within the Service or by email where appropriate.
20. Contact
For privacy questions, data requests or complaints, contact:
info@decoding22energies.com